CVE-2016-4361

CVE-2016-4361 affects HP LoadRunner and HP Performance Center. Multiple components (e.g., magentservice.exe) are vulnerable to remote denial of service via malformed requests (xdr_string handling) or related malformed packets, allowing a remote attacker to crash the service. Affected products/ver...

CVE-2016-4360

web/admin/data.js in the Performance Center Virtual Table Server VTS component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through...

CVE-2016-4361

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allow remote attackers ...

CVE-2016-4360

The CVE-2016-4360 issue affects Hewlett Packard Enterprise LoadRunner/Performance Center components (notably the Virtual Table Server import_csv feature). The root cause is that web/admin/data.js in the VTS component does not restrict file paths sent to unlink, enabling an unauthenticated remote ...

CVE-2016-4361: Undefined Security Weakness

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allow remote attackers ...

CVE-2016-4360: Undefined Security Weakness

web/admin/data.js in the Performance Center Virtual Table Server VTS component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through...

CVE-2016-4359: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through...

Multiple vulnerabilities in HPE LoadRunner and Performance Center (CNVD-2016-03838)

HPE LoadRunner and Performance Center are performance load testing software from Hewlett-Packard USA. Multiple vulnerabilities in HPE LoadRunner and HPE Performance Center allow remote attackers to conduct denial-of-service attacks by submitting ad hoc requests...

Multiple vulnerabilities in HPE LoadRunner and Performance Center (CNVD-2016-03839)

HPE LoadRunner and Performance Center are performance load testing software from Hewlett-Packard USA. Multiple security vulnerabilities in HPE LoadRunner and HPE Performance Center allow remote attackers to conduct denial-of-service attacks that could exploit the vulnerabilities by submitting...

Multiple vulnerabilities in HPE LoadRunner and Performance Center (CNVD-2016-03840)

HPE LoadRunner and Performance Center are performance load testing software from Hewlett-Packard USA. Multiple vulnerabilities in HPE LoadRunner and HPE Performance Center allow remote attackers to conduct denial-of-service attacks by submitting ad hoc requests...

Hewlett Packard Enterprise LoadRunner Shared Memory Name Construction Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within mchan.dll when constructing a shared memory file name. The issue...

Hewlett Packard Enterprise LoadRunner Virtual Table Server import_csv Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the importcsv functionality. The issue lies in the failure to...

HP Virtual Table Server Detection

An HP Virtual Table Server VTS is listening on the remote host. VTS offers an alternative to standard parameterization for load and performance testing, and it is a component of HP LoadRunner and HP Performance Center. C Tenable Network Security, Inc. include"compat.inc"; if description...

HP LoadRunner 11.52 / 12.00 / 12.01 / 12.02 / 12.50 Virtual Table Server RCE

The version of HP LoadRunner installed on the remote host is 11.52, 12.00, 12.01, 12.02, or 12.50. It is, therefore, affected by a remote code execution vulnerability in the Virtual Table Server VTS. An unauthenticated, remote attacker can exploit this, via a malicious connection string or SQL...

Hewlett-Packard LoadRunner Virtual Table Server import_database Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Virtual Table Server, which listens by default on port 4000. By providi...

HP Loadrunner Virtual Table Server远程代码执行漏洞

No description provided by source...

HP Loadrunner Virtual Table Server Remote Code Execution Vulnerability

HP LoadRunner is a performance testing tool developed by HP. A remote code execution vulnerability exists in HP Loadrunner Virtual Table Server. It allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-6857

Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...

Design/Logic Flaw

Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...

CVE-2015-6857

CVE-2015-6857 affects HP LoadRunner’s Virtual Table Server (VTS). The vulnerability enables remote code execution in VTS via unauthenticated access, with HP/Nessus/ZDI references detailing concrete vectors: HP LoadRunner VTS running 11.52, 12.00, 12.01, 12.02, or 12.50 is exploitable through a re...